7855 matches found
Ruby on Rails JSON Processor YAML Deserialization Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Ruby on Rails JSON Processor YAML...
Ruby on Rails JSON Processor YAML Deserialization Code Execution
Exploit for multiple platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core...
Ruby on Rails - JSON Processor YAML Deserialization Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Ruby on Rails JSON Processor YAML...
Portable UPnP SDK unique_service_name() Remote Code Execution
This module exploits a buffer overflow in the uniqueservicename function of libupnp's SSDP processor. The libupnp library is used across thousands of devices and is referred to as the Intel SDK for UPnP Devices or the Portable SDK for UPnP Devices. Due to size limitations on many devices, this...
[SECURITY] Fedora 16 Update: qemu-0.15.1-9.fc16
QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...
Fedora Update for qemu FEDORA-2013-0971
Check for the Version of qemu OpenVAS Vulnerability Test Fedora Update for qemu FEDORA-2013-0971 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Command injection
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation...
Ruby on Rails XML Processor YAML Deserialization Code Execution (CVE-2013-0156)
A remote code execution vulnerability exists in Ruby on Rails...
Ruby on Rails XML Processor YAML Deserialization RCE Vulnerability (Jan 2013)
Ruby on Rails is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Debian Security Advisory DSA 2608-1 (qemu - buffer overflow)
It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames which it...
Ruby On Rails XML Processor YAML Deserialization Code Execution
This Metasploit module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the...
Ruby On Rails XML Processor YAML Deserialization Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Ruby on Rails XML Processor YAML...
Ruby on Rails - XML Processor YAML Deserialization Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Ruby on Rails XML Processor YAML...
Ruby on Rails XML Processor YAML Deserialization Scanner
This module attempts to identify Ruby on Rails instances vulnerable to an arbitrary object instantiation flaw in the XML request processor. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ruby ...
Ruby on Rails XML Processor YAML Deserialization Code Execution
This module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the application...
Samsung Acknowledges Exynos Root Exploit
Samsung downplayed a root exploit vulnerability in some of its Exynos processors, and promised a patch for the flaw, according to a company statement acquired by AndroidCentral. The bug affects devices with Exynos 4210 and 4412 processors and was first made public by an XDA Developers forum membe...
CVE-2012-4856
The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...
Code injection
The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-4856
The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-4856
The CVE-2012-4856 vulnerability affects the IBM Power 5 Service Processor (multiple MTMs listed in vendor advisories) where the firewall code is not executed in certain network configurations, enabling remote attackers to execute arbitrary code. The underlying issue is the Service Processor faili...